Principal Digital Forensic Investigator

About the job

At Apple, world-class security begins with protecting the ideas, inventions, and products that define our brand. Join Global Security Investigations (GSI), an innovative, multidisciplinary team of investigators, legal counsel, technical analysts and forensic experts investigating risks to Apple’s intellectual property, trade secrets, and confidential information.

In this role as a Principal Digital Forensic Investigator, you will serve as both a senior technical authority and trusted advisor to executive and legal team and you will craft investigative strategies to address some of Apple’s most critical legal matters. You will lead high-consequence forensic investigations into insider threats, data theft, media leaks, cybercrime, complex frauds and a variety of other concerns. The successful candidate will develop bespoke forensics solutions to address the rapidly changing world of forensics, foster strong partnerships across Apple’s businesses, identify security loopholes and develop risk remediations.

Minimum Qualifications

• Principal-level career experience (25+ years) leading complex digital forensic investigations for law enforcement (federal/state/local/international) and in the private sector.
• Extensive experience performing digital forensics for high-tech crimes, including: trade secret misappropriation, insider threats, data exfiltration, media leaks, cyber incidents, internal fraud and national-security-grade matters.
• Demonstrated expertise in developing bespoke data acquisition and digital forensic solutions. Scripting proficiency in Python and Bash.
• Mastery of Apple operating systems (macOS, iOS, iPadOS, WatchOS) and corresponding core artifacts (e.g., Plists, SQLite databases, file system structures), as well as cloud forensics (iCloud, AWS, GCP).
• Prior qualification as an expert witness in state, federal, or international courts, specifically regarding Apple forensics and digital evidence integrity. Extensive testimonial experience in civil and/or criminal legal proceedings.
• Prior experience developing and delivering trainings on MacOS forensics to law enforcement and the private sector.
• Deep knowledge of secure handling and storage for physical and electronic evidence in alignment with criminal/civil chain of custody procedures and industry best practices.
• Prior employment as police officer, investigator or equivalent with US or international law enforcement agency.
• Extensive experience interviewing witnesses and subjects of investigation.
• Strong background eDiscovery collections, processing and data review tools.
• Certification in DFIR, SANS, and/or relevant industry education.
• Ability to deliver accurate, impartial findings with consistent attention to detail.
• Strong verbal and written communication.
• Commitment to integrity and confidentiality.

Preferred Qualifications

• Experience working with Fortune 500 companies.
• Degree in Computer Science, Digital Forensics, Information Systems or equivalent.

Pay & Benefits

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $248,000 and $372,700, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

EEO Statement

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

Accessibility

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Application Deadline

Apple accepts applications to this posting on an ongoing basis.